// SCAN REPORT

Google Workspace MCP Server

128 tools. 74 can modify or destroy data without limits.

14 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

74 can modify or destroy data

54 read-only

128 tools total

Community server · catalogue entry verified 29/06/2026

How to control Google Workspace MCP Server ↓

TOOL MAP

What Google Workspace MCP Server exposes to your agents

Read (54) Write / Execute (60) Destructive / Financial (14)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Google Workspace MCP Server tools

Destructive · High clearExcelRange Clearing data from a range is an irreversible operation — once values are erased, the original content cannot be recovered without a backup or version history. Destructive · High clearSpreadsheetRange Clearing all values from a spreadsheet range is an irreversible destructive action — the data is permanently removed with no built-in undo mechanism via the API. Destructive · High deleteCalendarEvent This tool permanently removes calendar event data without possibility of reversal (unless recovered through backup). Destructive · Medium deleteComment Deletion operations are irreversible and cannot be undone by the user through normal means.

74 of Google Workspace MCP Server's 128 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Google Workspace MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Google Workspace MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "clearExcelRange": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "addAccount": {
    "limits": [
      {
        "counter": "addaccount_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "batchGetPeopleContacts": {
    "limits": [
      {
        "counter": "batchgetpeoplecontacts_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Google Workspace MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Instant setup, no code required.

FULL CATALOGUE

All 128 Google Workspace MCP Server tools

DESTRUCTIVE 14 tools

Destructive clearExcelRange Clears values from a range in an Excel-format file (.xlsx or .xls) on Google Drive. Similar to clearSpreadshee Destructive clearSpreadsheetRange Clears all values from a specific range in a Google Spreadsheet. Destructive deleteCalendarEvent Delete a calendar event. Destructive deleteComment Deletes a comment from the document. Destructive deleteExcelSheet Deletes a sheet/tab from an Excel-format file (.xlsx or .xls) on Google Drive. Cannot delete the last sheet. Destructive deleteFile Moves a file or folder to trash in Google Drive. Files can be restored from trash within 30 days. Destructive deleteGmailDraft Permanently delete a Gmail draft. This action cannot be undone. Destructive deleteGmailFilter Delete a Gmail filter by its ID. Destructive deleteGmailMessage Move a Gmail message to trash. Messages in trash are automatically deleted after 30 days. Destructive deletePeopleContactGroup Delete a contact group. Contacts in the group are not deleted. Destructive deletePeopleContactPhoto Remove a contact Destructive deleteRange Deletes content within a specified range (start index inclusive, end index exclusive) from the document or a s Destructive deleteSpreadsheetSheet Deletes a sheet/tab from an existing Google Spreadsheet. Cannot delete the last sheet. Destructive removeAccount Removes a Google account from the MCP server. This deletes the stored credentials for the account.

WRITE 60 tools

Write addAccount Starts the OAuth flow to add a new Google account. Returns an authorization URL that must be opened in a brows Write addAttachmentToDraft Add an attachment to an existing Gmail draft. The attachment is added to the draft without modifying other con Write addComment Adds a comment anchored to a specific text range in the document. NOTE: Due to Google API limitations, comment Write addExcelSheet Adds a new sheet/tab to an Excel-format file (.xlsx or .xls) on Google Drive. Write addFormQuestion Add a question to a Google Form. Question types must be lowercase: Write addGmailLabel Add a label to a Gmail message. Common labels: STARRED (star), IMPORTANT, INBOX. Use listGmailLabels to see al Write addSlide Add a new slide to a presentation. Write addSpreadsheetSheet Adds a new sheet/tab to an existing Google Spreadsheet. Write addTextToSlide Add a text box with content to a slide. Write appendExcelRows Appends rows to an Excel-format file (.xlsx or .xls) on Google Drive. Similar to appendSpreadsheetRows but pre Write appendSpreadsheetRows Appends rows of data to the end of a sheet in a Google Spreadsheet. Write appendToGoogleDoc Appends text to the very end of a specific Google Document or tab. Write applyParagraphStyle Applies paragraph-level formatting (alignment, spacing, named styles like Heading 1) to paragraph(s). Target m Write applyTextStyle Applies character-level formatting (bold, color, font, etc.) to a specific range or found text. Target must be Write batchAddGmailLabels Add labels to multiple Gmail messages at once. More efficient than adding labels one by one. Write batchRemoveGmailLabels Remove labels from multiple Gmail messages at once. More efficient than removing labels one by one. Use to bul Write convertExcelToSheets Converts an Excel-format file (.xlsx or .xls) on Google Drive to native Google Sheets format for full Sheets A Write copyFile Creates a copy of a Google Drive file or document. Write createCalendarEvent Create a new calendar event. Write createDocument Creates a new Google Document. Write createFolder Creates a new folder in Google Drive. Write createForm Create a new Google Form. Write createFromTemplate Creates a new Google Document from an existing document template. Write createGmailDraft Create a draft email in Gmail. Supports threading by providing replyToMessageId to create a draft reply. Suppo Write createGmailFilter Create a Gmail filter to automatically process incoming messages. Filters can add/remove labels, forward messa Write createGmailLabel Create a new Gmail label (folder). Labels can be used to organize emails. After creating a label, use addGmail Write createPeopleContact Create a new contact with the specified fields. Write createPeopleContactGroup Create a new contact group (label). Write createPresentation Create a new Google Slides presentation. Write createSpreadsheet Creates a new Google Spreadsheet. Write editGoogleDoc Find and replace text in a Google Document. Similar to Claude Code Write editTableCell Edits the content and/or basic style of a specific table cell. Requires knowing table start index. Write fixListFormatting EXPERIMENTAL: Attempts to detect paragraphs that look like lists (e.g., starting with -, , 1.) and convert the Write formatMatchingText Finds specific text within a Google Document and applies character formatting (bold, italics, color, etc.) to Write insertImageFromUrl Inserts an inline image into a Google Document from a publicly accessible URL. Write insertLocalImage Uploads a local image file to Google Drive and inserts it into a Google Document. The image will be uploaded t Write insertPageBreak Inserts a page break at the specified index. Write insertTable Inserts a new table with the specified dimensions at a given index. Write insertText Inserts text at a specific index within the document body or a specific tab. Write markAsRead Mark a Gmail message as read by removing the UNREAD label. Write markAsUnread Mark a Gmail message as unread by adding the UNREAD label. Write modifyPeopleContactGroupMembers Add or remove contacts from a contact group. Write moveFile Moves a file or folder to a different location in Google Drive. Write removeAttachmentFromDraft Remove an attachment from an existing Gmail draft by filename. The attachment is removed without modifying oth Write removeGmailLabel Remove a label from a Gmail message. Common uses: remove UNREAD (mark as read), remove INBOX (archive), remove Write renameExcelSheet Renames a sheet/tab in an Excel-format file (.xlsx or .xls) on Google Drive. Write renameFile Renames a file or folder in Google Drive. Write replyToComment Adds a reply to an existing comment. Write resolveComment Marks a comment as resolved. IMPORTANT LIMITATION: The Google Drive API does not fully support resolving comme Write saveAttachmentToDrive Save a Gmail attachment directly to Google Drive. Uploads the attachment as a file to Drive without downloadin Write sendGmailDraft Send an existing Gmail draft. The draft will be sent and removed from drafts. Write updateCalendarEvent Update an existing calendar event. Write updateGmailDraft Update an existing Gmail draft. You can update any combination of to, cc, bcc, subject, body, or attachments. Write updatePeopleContact Update an existing contact. Fields provided will replace existing values. Omitted fields remain unchanged. Write updatePeopleContactGroup Rename an existing contact group. Write updatePeopleContactPhoto Upload or update a contact Write uploadFileToDrive Uploads a local file to Google Drive. Supports any file type. Use this to upload documents, images, PDFs, or a Write writeExcelCell Writes a value to a specific cell in an Excel-format file (.xlsx or .xls) on Google Drive. Use when the file m Write writeExcelRange Writes data to a range in an Excel-format file (.xlsx or .xls) on Google Drive. Similar to writeSpreadsheet bu Write writeSpreadsheet Writes data to a specific range in a Google Spreadsheet. Overwrites existing data in the range.

READ 54 tools

Read batchGetPeopleContacts Get detailed information for multiple contacts at once by their resource names. Read downloadFromDrive Downloads a file from Google Drive to your local filesystem. For Google Docs/Sheets/Slides, exports to a speci Read downloadGmailAttachment Download a Gmail attachment with full data. Returns complete base64-encoded data, or saves directly to a file Read downloadSpreadsheet Downloads a Google Spreadsheet as CSV or Excel (XLSX) format and saves it to the local filesystem. CSV exports Read findElement Finds elements (paragraphs, tables, images, lists) in a document. Returns indices and basic info about matchin Read getCalendarEvent Get details of a specific calendar event. Read getComment Gets a specific comment with its full thread of replies. Read getDocumentInfo Gets detailed information about a specific Google Document. Read getExcelInfo Gets detailed information about an Excel-format file (.xlsx or .xls) on Google Drive, including all sheets and Read getFolderInfo Gets detailed information about a specific folder in Google Drive. Read getFormResponses Get responses submitted to a Google Form. Read getGmailAttachment Get metadata and a preview of a Gmail attachment. Returns truncated base64 data (first 500 chars). For full at Read getPeopleContact Get detailed information for a specific contact by resource name. Returns all available fields. Read getPeopleContactGroup Get details of a specific contact group, including its members. Read getRecentGoogleDocs Gets the most recently modified Google Documents. Read getShareableLink Gets or creates a shareable link for a file with specified permission settings. Read getSpreadsheetInfo Gets detailed information about a Google Spreadsheet including all sheets/tabs. Read listAccounts Lists all configured Google accounts that can be used with this MCP server. Read listCalendarEvents List events from a calendar within a time range. Read listCalendars List all calendars accessible by the account. Read listComments Lists all comments in a Google Document. Read listDocumentTabs Lists all tabs in a Google Document, including their hierarchy, IDs, and structure. Read listExcelFiles Lists Excel-format files (.xlsx and .xls) in your Google Drive. Use this to find spreadsheets stored in Excel Read listExcelSheets Lists all sheet/tab names in an Excel-format file (.xlsx or .xls) stored on Google Drive. Use this for spreads Read listFolderContents Lists the contents of a specific folder in Google Drive. Read listForms List Google Forms in Drive with optional search. Read listGmailDrafts List all draft emails in Gmail. Read listGmailFilters List all Gmail filters (rules that automatically process incoming messages based on criteria). Read listGmailLabels List all Gmail labels (folders) for the account. Read listGmailMessages List email messages from Gmail inbox or other labels. Returns message IDs and snippets. Read listGmailThreads List email threads (conversations) from Gmail. Each thread contains all messages in a conversation. Read listGoogleDocs Lists Google Documents from your Google Drive with optional filtering. Read listGoogleSheets Lists Google Spreadsheets from your Google Drive with optional filtering. Read listPeopleContactGroups List all contact groups (labels) for the user. Read listPeopleContacts List contacts from the user Read listPeopleDirectory List people in the organization directory. Only works for Google Workspace accounts, not personal Gmail accoun Read listPeopleOtherContacts List Read listPresentations List Google Slides presentations in Drive with optional search. Read listRecentFiles Lists recently modified files across all of Google Drive, not limited to a specific type. Read readExcelFile Reads data from a specific range in an Excel-format file (.xlsx or .xls) on Google Drive. Similar to readSprea Read readForm Read the structure and questions of a Google Form. Read readGmailDraft Read the full content of a Gmail draft by its draft ID. Read readGmailMessage Read a specific Gmail message by ID. Returns full message content including headers, body, and attachments inf Read readGmailThread Read a complete Gmail thread (conversation) including all messages. Returns full content of all messages in th Read readGoogleDoc Reads the content of a specific Google Document, optionally returning structured data. Read readPresentation Read the content and structure of a Google Slides presentation. Read readSpreadsheet Reads data from a specific range in a Google Spreadsheet. Read searchCalendarEvents Search for calendar events by text query. Searches event summary, description, location, and attendee names/em Read searchDrive Searches across all files in Google Drive by name, content, or type. More powerful than type-specific search t Read searchGmail Search Gmail using Gmail search syntax. Returns matching messages with snippets. Read searchGoogleDocs Searches for Google Documents by name, content, or other criteria. Read searchPeopleContacts Search contacts by name, email, phone number, or other fields. Returns matching contacts with basic info. Read searchPeopleDirectory Search the organization directory by name, email, or other fields. Only works for Google Workspace accounts. Read searchPeopleOtherContacts Search

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Google Workspace MCP Server

Can an AI agent delete data through the Google Workspace MCP Server MCP server? +

Yes. The Google Workspace MCP Server server exposes 14 destructive tools including clearExcelRange, clearSpreadsheetRange, deleteCalendarEvent. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Google Workspace MCP Server? +

The Google Workspace MCP Server server has 60 write tools including addAccount, addAttachmentToDraft, addComment. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Google Workspace MCP Server.

How many tools does the Google Workspace MCP Server MCP server expose? +

128 tools across 3 categories: Destructive, Read, Write. 54 are read-only. 74 can modify, create, or delete data.

How do I enforce a policy on Google Workspace MCP Server? +

Register the Google Workspace MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Google Workspace MCP Server tool call.

Deterministic rules across all 128 Google Workspace MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON GOOGLE WORKSPACE →

Instant setup, no code required.

128 Google Workspace MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.